QID 731248

Sunhillo is an industry leader in surveillance data distribution.

The Sunhillo SureLine application contained an unauthenticated operating system (OS) command injection vulnerability that allowed an attacker to execute arbitrary commands with root privileges. This would have allowed for a threat actor to establish an interactive channel, effectively taking control of the target system.

Affected Versions:
Sunhillo SureLine versions prior to 8.7.0.1.1

QID Detection Logic (Unauthenticated):
This QID sends a crafted payload as an HTTP POST request that triggers a callback to the scanner, if vulnerable. Please note that this QID relies on a callback to the scanner on a random port. The target must be enabled to connect back to any random port on the scanner.

Successful exploitation of the vulnerability may allow an unauthenticated attacker to execute arbitrary code, leading to complete system compromise.